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Introduction 


In the next century when cyber-historians look back to the 1990s they will 
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recognize 1995 as the year of the graphical browser, the year the Internet began to 
be overshadowed by the Web. But they will probably also view 1998 as an 
important moment -- in the history of the browser wars. At a minimum, 1998 will 
be noted for the emergence of two terms that represent similar phenomena: 
electronic civil disobedience and hacktivism. In that year, a Net based affinity 
group called the Electronic Disturbance Theater pushed and agitated for new 
experimentation with electronic civil disobedience actions aimed mostly at the 
Mexican government. It engaged its FloodNet software and invited participation to 
an international set of artists, digerati, and political activists to make a "symbolic 
gesture" in support of Mexico's Zapatistas. While at the same time, in Britain, in 
Australia, in India, in China, on almost every continent there were reports of 
hacktivity. In the spring of 1998 a young British hacker known as "JF" accessed 
about 300 web sites and placed anti-nuclear text and imagery. He entered, changed 
and added HTML code. At that point it was the biggest political hack of its kind. 
Since then, and increasingly over the course of the year, there were numerous 
reports of web sites being accessed and altered with political content. 


Taken together we may consider both the more symbolic electronic civil 
disobedience actions and the more tangible hacktivist events under the rubric of 
extraparliamentarian direct action Net politics, where extraparliamentarian is taken 
to mean politics other than electoral or party politics, primarily the grassroots 
politics of social movement. By no means was 1998 the first year of the browser 
wars, but it was the year when electronic civil disobedience and hacktivism came 
to the fore, evidenced by a front page New York Times article on the subject by the 
end of October. Since then the subject has continued to move through the media 
sphere. [1] 


What this paper attempts to do is examine these emerging trends from a slightly 
wider angled lens. This paper puts forth five portals for consideration: 
computerized activism, grassroots infowar, electronic civil disobedience, 
politicized hacking, and resistance to future war. At first they were conceived as 
five portals into Hacktivism, but perhaps they better serve as five portals for 
looking at the wider world of extraparliamentarian direct action Net politics, 
although that phrase is admittedly awkward. Nevertheless, these five portals seem 
to provide a useful starting point for a more in-depth, yet to come, examination of 
the convergence of activism, art, and computer-based communication and media. 
In addition to starting to define, to frame, and to contextualize contemporary 
hacktivity, in terms of its roots, its lateral dimension, and its trajectivity, this paper 
also asks some nascent questions of a political, tactical, technological, ethical, and 
legal nature and makes some preliminary claims about the likely direction of these 
various movements. 


Computerized Activism 


Computerized activism exists at the intersections of politico-social movements and 
computer-mediated communication. The origins of computerized activism extend 
back in pre-Web history to the mid 1980s. As an example, the first version of 
PeaceNet appeared in early 1986. PeaceNet enabled - really for the first time - 
political activists to communicate with one another across international borders 
with relative ease and speed. [2] The advent of newsgroup services like PeaceNet, 
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and wider dispersal of other Bulletin Board Systems, email lists, and gopher sites 
characterizes the cyber-environment within which most early on-line political 
activists found themselves. This largely text-based environment persisted up until 
as late as 1994 and 1995 when the first GUI browsers were introduced. Even 
today, while Web sites augment these earlier forms, email communication remains 
a central device in the international circulation of struggle and the creation and 
maintenance of international solidarity networks. [3] 


During the early to mid 1980s the subject of computer-mediated communication 
(CMC) was taken up by scholars in, for example, psychology and sociology. When 
communication scholars began to examine CMC, and in particular when they 
began to assess the juncture of political communication and CMC, a number of 
academic treatments of “electronic democracy" were written in which politics is 
positioned narrowly within the confines of electoral or parliamentarian politics. [4] 
Among the earliest treatments of CMC from among communication scholars who 
entertain extraparliamentarian or grassroots politcs is by Downing in "Computers 
for Political Change." [5] Not surprisingly, PeaceNet is one of his case studies. For 
purposes of tracing the origins of more current cross-border email exchange and its 
role it creating and maintaining international solidarity networks, Downing points 
to PeaceNet's establishment of international links in 1987. Among early adopters 
of these means of communication were people in the 1980s anti-nuclear and 
Central American solidarity movements. 


By the late 1980s and the very beginning of the 1990s, the significance of 
cross-border, international, email communication began to be realized. The 
international role of email communication, coupled to varying degrees with the use 
of the Fax machine, was highlighted in both the struggles of pro-democracy 
Chinese students and in broader trans-national movements that lead to the 
dissolution of the Soviet Union. Shortly thereafter, we began to see scholarly work 
on this subject. Harasim’s "Global Networks: Computers and International 
Communication” began to theorize about the role of international email 
communication in linking together the world. [6] 


Computerized activism remained marginal to political and social movements until 
the explosion of the Internet in the early to mid 1990s and more so until the arrival 
of the graphical browser in 1994 and 1995. Now, in the post-Web Internet phase 
there is widespread use of these media forms by a plethora of grassroots groups 
and other political actors in countries all over the world. [7] 


A common thread or understanding that runs through various types of politically 
based computer-mediate communication, from early BBS systems, to email 
listservs, and to sophisticated Web sites with fancy bells and whistles, seems to be 
an overarching dominant paradigm that privileges discourse, dialogue, discussion 
and open and free access. This observation becomes important when looking more 
at electronic civil disobedience and politicized hacking, because it is with this 
dominant paradigm of the Habermasian Web that these later forms conflict and 
cause friction. 


So the first portal of Computerized Activism is important for understanding the 


roots of today’s extraparliamentarian, more direct action focused, political CMC. It 
is the portal that has been with us the longest, and the portal within which most 
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political actors on the Net feel the most comfortable. Computerized activism, 
defined more purely as the use of the Internet infrastructure as a means for activists 
to communicate with one another, across international borders or not, is less 
threatening to power than the other types of uses we see emerging in which the 
Internet infrastructure is not only a means toward or a site for communication, but 
the Internet infrastructure itself becomes an object or site for action. This 
transgression, or paradigmatic shift in thinking, of moving away from believing the 
Internet solely as communication device to Internet as communication device and 
site for action is dealt with incrementally in the next four sections. 


Grassroots Infowar 


Grassroots infowar is an intensification of computerized activism. Infowar here 
refers to a war of words, a propaganda war. Grassroots infowar is the first step, the 
first move away from the Internet as just a site for communication and the 
beginning of the transformation from word to deed. Grassroots infowar actors 
emerge fully cognizant they are on a global stage, telepresent across borders, in 
many locations simultaneously. There exists a sense of immediacy and 
interconnectivity at a global level. More than a mere sharing of information and 
dialogue, there is a desire to push words towards action. Internet media forms 
become vehicles for inciting action as opposed to simply describing or reporting. 


In the early 1990s, following the U.S. directed "smart" bombardment of Iraq and 
following the dissolution of the Soviet Union and the subsequent uselessness of 
Cold War rhetoric as a rationalization for foreign intervention, the U.S. 
military-intelligence community, along with its allies in financial-corporate 
sectors, needed to craft a new military doctrine. Their answer was Information 
Warfare and the threat of info-terrorism. State-side scholars at RAND, a think tank 
in Santa Monica, California, that often does the military's "thinking", set about 
devising new theoretical constructs that would lay the basis for their version of 
Information Warfare. In 1993, under the RAND banner, Ronfeldt and Arquiila 
wrote Cyberwar is Coming! This work sets out the distinctions between netwar 
and cyberwar and is cited by nearly every subsequent treatment of Information 
Warfare theory. [8] Where netwar refers more to the war of words, the propaganda 
war that exists on the Internet itself, cyberwar refers to cybernetic warfare, war 
dependent on computers and communications systems, the war of C4I - Command, 
Control, Communication, Computers, and Information. 


Not long after RAND's theoretical intervention, pragmatic cases of netwar 
appeared. Among the most celebrated is the case of Mexico's Zapatistas and the 
international community of supporters that quickly brought that struggle on to the 
Internet. With the global pro-Zapatista Internet experience there began to be a 
rethinking or an interrogation of RAND's theoretical constructs, albeit from a more 
radical grassroots perspective. Some of this recasting has been brought forth in 
pieces by Harry Cleaver, a professor at the University of Texas at Austin and key 
person behind the Chiapas95 project, an email-based news and information 
distribution service. Probably Cleaver's most well known work in this regard is 
"The Zapatistas and the Electronic Fabric of Struggle." [9] 


Despite some radical interventions and attempts to reframe dominant forms of 
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military and intelligence Information Warfare theory, most of the material, not 
surprisingly, is produced by the likes of RAND, the National Defense University, 
the Department of Defense, the US Air Force, or private sector initiatives. The 
meme of Information Warfare seems to have spread and been promulgated largely 
through network security paranoics and others keen on guarding digital property. 
But there are signs that Information Warfare is spreading to other areas. This year 
Information Wafare hit the international digital arts community by being the main 
subject of the annual Ars Electronic Festival in Linz, Austria. [10] 


Theorizing about grassroots or bottom-up Information Warfare doesn't nearly get 
as much attention as the dominant models and as a consequence there is not much 
written on the subject. [11] The case of the global pro-Zapatista networks of 
solidarity and resistance offers a point of departure for further examination of 
grassroots infowar. One feature of Zapatista experience over the course of the last 
5 years is that it has been a war of words, as opposed to a prolonged military 
conflict. This is not to say there isn't a strong Mexican military presence in the 
state of Chiapas. Quite the contrary is true. But fighting technically ended on 
January 12, 1994 and since then there has been a ceasefire and numerous attempts 
at negotiation. [12] What scholars, activists, and journalists, on both the left and 
the right, have said is that the Zapatistas owe their survival at this point largely to a 
war of words. This war of words, in part, is the propaganda war that has been 
successfully unleashed by Zapatista leaders like Subcommandante Marcos as well 
as non-Zapatista supporters throughout Mexico and the world. Such propaganda 
and rhetoric has, of course, been transmitted through more traditional mass 
communication means, like through the newspaper La Jornada. [13] But quite a 
substantial component of this war of words has taken place on the Internet. Since 
January 1, 1994 there has been an explosion of the Zapatista Internet presence in 
the forms of email Cc: lists, newsgroups, discussion lists, and web sites. [14] 


A primary distinction, then, between earlier forms of computerized activism and 
forms of grassroots infowar is in the degree of intensity. Coupled with that is the 
degree to which the participants are noticed and seen as a force. Given the 
Zapatistas relatively high profile in Mexican society over the course of the last five 
years, and given the fact that they are technically a belligerent force negotiating 
with a government, the Internet activity surrounding them takes on a different 
significance than, say, for example, the Internet activity of the Sierra Club, 
Amnesty International, or other similar venture. 


An important difference is that in grassroots infowar comes the desire to incite 
action and the ability to do so at a global scale. At the end of 1997, news of the 
Acteal massacre in Chiapas, in which 45 indigenous people were killed, quickly 
spread through global pro-Zapatista Internet networks. Within a matter of days 
there were protests and actions at Mexican consulates and embassies all over the 
world. [15] This incident, too, is now seen as a turning point in the stance by some 
toward the Internet infrastructure. While prior to this moment, there had been few 
if any incident reports of pro-Zapatista hacktivity, following there has been a shift, 
the beginning of the move toward accepting the Internet infrastructure as both a 
channel for communication and a site for action. 


Electronic Civil Disobedience 
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Acting in the tradition of non-violent direct action and civil disobedience, 
proponents of Electronic Civil Disobedience are borrowing the tactics of trespass 
and blockade from these earlier social movements and are experimentally applying 
them to the Internet. A typical civil disobedience tactic has been for a group of 
people to physically blockade, with their bodies, the entranceways of an opponent's 
office or building or to physically occupy an opponent's office -- to have a sit-in. 
Electronic Civil Disobedience, as a form of mass decentered electronic direct 
action, utilizes virtual blockades and virtual sit-ins. Unlike the participant in a 
traditional civil disobedience action, an ECD actor can participate in virtual 
blockades and sit-ins from home, from work, from the university, or from other 
points of access to the Net. [16] 


The phrase "Electronic Civil Disobedience" was coined by a group of artists and 
theorists called the Critical Art Ensemble. In 1994 they published their first book 
that dealt with this subject, "The Electronic Disturbance," followed two years later 
by "Electronic Civil Disobedience and Other Unpopular Ideas." [17] Both of these 
works are devoted to a theoretical exploration of how to move protests from the 
streets onto the Internet. They examine the tactics of street protest, on-the-ground 
disruptions and disturbance of urban infrastructure and they hypothesize how such 
practices can be applied to the Internet infrastructure. 


Before 1998, Electronic Civil Disobedience remained largely as theoretical 
musings. But after the 1997 Acteal Massacre in Chiapas, there was a shift toward a 
more hybrid position that views the Internet infrastructure as both a means for 
communication and a site for direct action. This shift distinguishes more sharply 
the third portal of Electronic Civil Disobedience from the first and second portals. 


Electronic Civil Disobedience is the first transgression, making Politicized 
Hacking the second transgression and Resistance to Future War the third. Each 
succeeding transgression moves the stance toward the Internet infrastructure 
further away from the public sphere model and casts it more as conflicted territory 
bordering on a war zone. Where the former more discursive model is perhaps a 
manifestation of Habermas's Paris Salon, the later may have roots in the Boston 
Tea Party. [18] 


The realization and legitimization of the Internet infrastructure as a site for word 
and deed opens up new possibilities for Net politics, especially for those already 
predisposed to extraparliamentarian and direct action social movement tactics. In 
early 1998 a small group calling themselves the Electronic Disturbance Theater 
had been watching other people experimenting with early forms of virtual sit-ins. 
The group then created software called FloodNet and on a number of occasions has 
invited mass participation in its virtual sit-ins against the Mexican government. 


[19] 


EDT members Carmin Karasic and Brett Stalbaum created FloodNet to direct a 
"symbolic gesture" against an opponent's web site. FloodNet is a Web-based Java 
applet that repeatedly sends browser reload commands. [20] In theory, when 
enough EDT participants are simultaneously pointing the FloodNet URL toward 
an opponent site, a critical mass prevents further entry. Actually, this has been 
rarely attained. Given this, perhaps FloodNet's power lies more in the simulated 
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threat. 


On September 9, 1998, EDT exhibited its SWARM project [21] at the Ars 
Electronic Festival on Information Warfare, where it launched a three-pronged 
FloodNet disturbance against web sites of the Mexican presidency, the Frankfurt 
Stock Exchange, and the Pentagon, to demonstrate international support for the 
Zapatistas, against the Mexican government, against the U.S. military, and against 
a symbol of international capital. [22] 


But within several hours of activating project SWARM, FloodNet was disabled. 
On web browsers Java coffee cups streamed quickly across the bottom of the 
screen and FloodNet froze. Participants began to send email with word of trouble. 
Later that day a Wired writer learned from a Department of Defense spokesperson 
that the DOD had taken some steps against FloodNet. At the same time, an EDT 
co-founder received email that the Defense Information Systems Agency had 
complained about his ECD web site content. [23] 


Globally, 20,000 connected to the FloodNet browser on September 9 and 10. This 
action reverberated through European media. It was later picked up by Wired, 
ZDTV, Defense News, and National Public Radio, among others. On October 31 
EDT made the front page of the New York Times. The story continued to unfold. 
More interest from the media sphere. On November 22, EDT called for FloodNet 
against the School of the Americas. [24] As part of EDT's grande finale for the 
1998 season, the group plans to release a public version of FloodNet at 12:01 a.m. 
on January 1, 1999. 


Politicized Hacking 


Again mentioning Mexico, in addition to the Electronic Civil Disobedience style 
action directed at the surface, at the web site entranceway, there have also been in 
1998 actually hacks into Mexican government web sites where political messages 
have been added to those sites. [25] This particular tactic of accessing and altering 
web sites seems to have been the popular tactic for this year. Probably one of the 
most well known examples of this is the story of the young British hacker named 
"JF" who hacked into around 300 web sites world wide and placed anti-nuclear 
imagery and text. This method has been tried by a number of groups. October 
issues of the Ottawa Citizen and the New York Times did a decent job of capturing 
a number of these examples as they described this new trend. [26] 


One main distinction between most Politicized Hacking and the type of Electronic 
Civil Disobedience just mentioned is that while ECD actors don’t hide their names, 
operating freely and above board, most political hacks are done by people who 
wish to remain anonymous. It is also likely political hacks are done by individuals 
rather than by specific groups. 


One of the reasons for the anonymity and secrecy is that the stakes are higher. 
Where proponents of forms of electronic civil disobedience actions are perhaps in 
an ambiguous area of law, certain types of political hacks used to varying degrees 
of success are unquestionable illegal. Few will question the legality of actually 
entering into an opponent's computer and adding or changing HTML code. 
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This distinction speaks to a different style of organization. Because of the more 
secret, private, low key, and anonymous nature of the politicized hacks, this type 
of activity expresses a different kind of politics. It is not the politics of 
mobilization, nor the politics that requires mass participation. This is said not to 
pass judgement, but to illuminate that there are several important forms of direct 
action Net politics already being shaped. 


As touched on already, depending on the conception of politics, politicized 
hacking is either a recent phenomena or one that can be traced back to hacking's 
origins. For the purposes of creating a portal to look into this world of 
extraparliamentarian direct action Net politics, it may be useful to consider both 
perspectives. There is clearly something political about early hackers’ desires to 
make information free. It probably would be useful to examine the history of early 
to mid 1980s hacking to look for more political origins of today's hacktivism. The 
computerized activism of the mid to late 1980s existed alongside the first 
generation of hackers. There may have been cross-over then. 


The contemporary conception of hacktivism seems to concern itself more with 
overtly political hacking. It is such a recent development that journalists have only 
barely begun to discover it, while scholars have had little time to consider it. There 
are numerous web sites devoted to hacking, but very few are devoted to 
Hacktivism per se. Although, one web site devoted to Hacktivism was created in 
the fall of 1998 by a group called The Cult of the Dead Cow. [27]. 


An important fact to realize and emphasize is that hacktivism, current forms of 
politicized hacking, is very much in its infancy. It is too early to draw definitive 
conclusions or to make strong predictions as to the direction it will take. Perhaps 
we can point to certain trajectories and make some logical projections. But we 
need to remember that at this point there is no consensus or agreement. Maybe the 
entire notion of hacktivism confuses and challenges sets of values and hacker 
codes of ethics. Quite possibly there is some re-thinking happening and we might 
begin to see a new set of ethical codes for hacking. [28] 


Resistance to Future War 


Some call the 1990-1991 Gulf War the first Information War because of the heavy 
military reliance on information and communication technology. The Gulf War 
was a pinnacle of achievement for the weapons industry, a chance to battle test 
sophisticated hardware that had been developed and manufactured under the 
Reagan and Bush presidencies. The weapons systems were dependent, as were all 
communications, on a major telecommunications infrastructure involving satellite, 
radar, radio, and telephone. The "smart" bombs were just the most mentioned of 
the sophisticated weaponry that was showcased during the made-for-CNN war. 


Although significantly under-reported by mainstream U.S. media, there was 
sizeable domestic opposition to the Gulf War, both prior to and especially during 
the first days of U.S. bombing of Iraq. In San Francisco the first three days of the 
Gulf War are referred to as the Three Days of Rage. During that period 
demonstrators filled, occupied, and controlled the streets and in some cases bridges 
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and highways in the greater San Francisco Bay Area. Similar disruptions happened 
up and down the west coast and all across the country. There was widespread 
grassroots resistance to the U.S. bombardment of Iraq in January 1991. [29] 


One part of that history is the role of information and communication technology, 
not just for the military forces, but also for the grassroots resistance. If the Gulf 
War is indicative of a paradigmatic shift toward the practice of Information 
Warfare, then it's also useful to look at the way in which ICT enabled resistance to 
the war effort. Some people within the opposition to the 1990-1991 Gulf War used 
email to communicate and they learned about resistance in other cities through 
Bulletin Board Systems and newsgroups. Others without computer access used fax 
and telephone. But many people had no connection to computers and received 
nothing by fax, instead they came out into the streets because of seeing posters or 
by hearing announcements on TV or on radio, or through word of mouth. It is safe 
to say that the Internet played only a marginal role in spreading news and moving 
people into action. The opposition to the war also watched CNN just like everyone 
else. 


But that was the end of 1990 and the very beginning of 1991, 8 years ago at the 
time of this writing, and in a pre-Web phase and even pre-Internet phase. Yes, by 
then the PC revolution had exploded and more and more people were buying 
modems, but the Gulf War is clearly positioned in the pre-boom days of the 
Internet in the United States. An interesting question is what would happen today, 
or moreover, what might happen tomorrow or in the near future, if presented with a 
similar set of circumstances. What if, for example, a Gulf War-like scenario 
emerged at the end of the year 2000 and the beginning of 2001? Suppose the 
United States decided to engage in what became an unpopular war, what might 
hacktivism look like in a condition of more generalized resistance? Or said another 
way, what might generalized resistance look like with the condition of 
hacktivism? 


The above is what is meant to be asked by suggesting that Resistance to Future 
War is the fifth portal into direct action Net politics. Where might this all lead? 
Until now, incidents of hacktivity have been sporadic and basically unconnected. 
Hacktivist events have been singular and not connected to a set of simultaneous 
occurrences. Perhaps the Electronic Disturbance Theater's work demonstrates the 
possible of waging a campaign on the Internet, and sustaining a presence over a 
period of time. But the group's one goal of a SWARM has yet to be achieved. 
Maybe it is useful to think of the SWARM metaphor in the consideration of 
Resistance to Future War. 


Perhaps a SWARM is a convergence of generalized resistance, referring to a 
situation in which there are not just isolated cases, or several pockets of opposition, 
but when there is across-the-board resistance occurring at a number of different 
levels and happening in cities and town all across the country, all at the same time. 
Such was the case during moments of domestic Gulf War resistance. There was 
simultaneous outpouring of people into the streets who engaged in quite a range of 
activity, both legal and illegal. A multitude of tactics were being used at the same 
time but without any central command or directing orders from above. Incidents of 
such upsurge are rare. But they undoubtedly will occur again. What will 
hacktivism look like then? What of it when hacktivism moves from isolated 
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incidents to a convergence of allied forces? Is this when hacktivism ceases to be 
and becomes cyberspacial resistance? While it may be too early to make accurate 
predictions, it seems true that the force or power of hacktivism has yet to be fully 
recognized or tested. Yet before getting lost in futuristic science fiction, consider 
some critiques. 


Emerging Critiques of Direct Action Net Politics 


There is no consensus among social and political activists regarding electronic 
civil disobedience, political hacking, hacktivism, or more generally 
extraparliamentarian direct action Net politics. It may in fact be too early to judge 
or to make definitive claims about these new tactics. But some critiques have 
co-developed along with the development of these new methods. They point to 
some basic questions over the effectiveness and appropriateness of these forms of 
electronic action. 


In an emerging discourse on several email listservs, that is too complicated to treat 
fairly in such a short piece as this one, there have been periodic criticisms raised 
both generally and specifically about aspects of the above mentioned tactics. [30] 
By no means can this piece attempt to describe and comment on all criticisms 
being raised about hacktivism et al, but it can at least address several of the 
criticism raised that seem most important. As already stated there are critiques 
aimed at the effectiveness and the appropriateness of cyber-protests. In terms of 
effectiveness three closely related types of questions have appeared regarding 
political, tactical, and technical effectiveness. Concerning appropriateness there are 
ethical questions, that may be also considered as political questions, and of course 
there are legal questions. Some of the legal concerns raise issues of enforceability 
and prosecuteability. 


Political and tactical effectiveness are closely intertwined. Are these methods of 
computerized activism effective? The answer to which is that it depends on how 
effectiveness is defined. What is effective? If the desired goal of hacktivism is to 
draw attention to particular issues by engaging in actions that are unusual and will 
attract some degree of media coverage, then effectiveness can be seen as being 
high. If, however, effectiveness is measured in terms of assessing the actions 
ability to be a catalyst for fomenting a more profound mobilization of people, then 
probably these new techniques are not effective. This distinction then, perhaps, is 
important. Hacktivism is not likely to be an organizing tool and the end result of 
hacktivity is not likely to be an increase in the ranks of the disaffected. Rather 
hacktivism appears to be a means to augment or supplement existing organizing 
efforts, a way to make some noise and focus attention. 


Technical critiques of hacktivism at the level of computer code are another way of 
addressing the efficacy of these new methods. Undoubtedly there will be 
disagreement as to how effective a particular technique is or isn't. But it seems that 
if new methods are created in an environment of experimentation, then valid 
critiques will be taken into consideration and used to redesign or alter plans and 
strategies. However, there are some technical critiques that are actually much more 
ideologically based than it would first seem. For example there is a certain 
tendency to reify bandwidth and from that viewpoint any action that clogs or 
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diminishes bandwidth is considered negative. So then, technical critiques can be 
value-laden with particular stances toward the Internet infrastructure. 


Despite the current levels of political, tactical, and technical questions that are 
being raised about hacktivism et al, it seems to be an area that is in a period of 
expansion, rather than contraction. And it generally seems that this critique and 
questioning is healthy and useful for the refinement of the practice. 


As just mentioned, some technical critiques are bound together with ideological 
pre-dispositions and are therefore also political questions, and perhaps even ethical 
questions of appropriateness. To judge blocking a web site, or clogging the 
pipelines leading up to a web site, is to take an ethical position. If the judgement 
goes against such activity, such an ethical position is likely to be derived from an 
ethical code that values free and open access to information. But there are 
alternative sets of values that justifies, for example, the blocking of access to web 
sites. These differences in beliefs over the nature of the Internet infrastructure are 
among people who are basically on the same side when it comes to most political 
questions. Some of these differences will probably be worked out as the subject 
and practice matures, while there may remain clear divisions. 


Last but not least, the more prosecutorial minded are apt to pass judgement on the 
appropriateness or inappropriateness of certain forms of hacktivism based on 
where the actions stand with respect to the law. While it is true that some forms of 
hacktivity are fairly easy to see as being outside the bounds of law - such as 
entering in to systems to destroy data - there are other forms that are more 
ambiguous and hover much closer to the boundary between the legal and the 
illegal. Coupled with this ambiguity are other factors that tend to cloud the 
enforceability or prosecuteability of particular hacktivist offenses. Jurisdictional 
factors are key here. The nature of cyberspace is extraterritorial. People can easily 
act across geographic political borders as those borders do not show themselves in 
the terrain. Law enforcement is still bound to particular geographic zones. So there 
is a conflict between the new capabilities of political actors and the old system to 
which the law is still attached. This is already beginning to change and legal 
frameworks, at the international level, will be mapped on to cyberspace. 


This section does not do justice to the full range of critiques that can be identified 
and described. And further exploration of the subject of direct action Net politics 
should make sure such a deeper analysis is taken. The intention here has been more 
so to develop a greater understanding of these new forms of electronic action and 
to only mention a few overarching critiques so as to not give the impression that 
this is moving forward without resistance. Quite the contrary is true. It seems that 
hacktivity has met and will meet resistance from many quarters. It doesn't seem as 
if opposition to hacktivist ideas and practices falls along particular ideological 
lines either. 


Conclusion 
Several things seem to be clear at this point. The first is that hacktivism, as defined 


across the full spectrum from relatively harmless computerized activism to 
potentially dangerous resistance to future war, is a phenomena that is on the rise. 
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Second, as just eluded to, hacktivism represents a spectrum of possibilities that 
exists in some combination of word and deed. On the one end of the spectrum is 
pure word. On the other end of the spectrum is pure deed. Computerized activism 
hovers closer to pure word, while the successive portals moves closer toward pure 
deed. Third, along with this tendency towards transgression, towards giving value 
to actions that move beyond words and that sees the Internet infrastructure also as 
a site for action, there comes with this a critique and resistance. But, despite this 
critique hacktivism is likely to continue to spread, but perhaps modified to 
accommodate some of the criticism. Fourth, with its continued spread, modified by 
critique or not, hacktivism is also likely to continue to gain attention. While media 
coverage may eventually drop off if or when hacktivism becomes more 
commonplace, at this point the way in which hacktivism is being represented is 
still new enough to warrant media attention for the foreseeable near future. 
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What remains unclear about hacktivism emerges when we start to ask questions 
like: what does this mean and where is this going? While we can claim with a fair 
degree of certainty that hacktivism is on the rise, there is little way to tell where it 
will lead to and the significance or lack there of that it will or might obtain. 
Moreover, there are aspects of hacktivism that still need to be explored. For 
example, the entire issue of extraterritoriality, of the Internet not being bound to 
any particular geographic region and the difficulties that poses for law 
enforcement, is one area that deserves further attention. 


One reason why it is difficult to get a firm grip on hacktivism's direction, in 
addition to simply saying that it is too early to tell, is that hacktivism will evolve in 
‘response to changing global economic and political conditions. As it is hard to 
predict trends and directions in the global economy, it too, then, becomes hard to 
predict events that will be linked to those meta shifts. 


Nevertheless, some people are trying to understand and make sense out of where 
hacktivism could go, although they might not be doing so using the particular word 
‘hacktivism' to describe this activity. Governments and corporations are keenly 
concerned, for example, about network security. To get some indications about the 
forecast for hacktivism in the 21st century it may be very useful to examine what 
these sorts of institutions are saying and how they are preparing to defend 
themselves. 


It could very well be that governments might impose severe regimes that 
successfully curtail hacktivism. If so, 1998 might be seen at some point as the 
glory days, when hacktivist experiments were able to go largely unchallenged 
because the mechanisms of the state had not yet been in place to deal with the new 
phenomena. Or it could be that hacktivism is able to successfully remain several 
steps out in front of law enforcement efforts, or that too many people become 
involved that enforceability remains problematic. Again, it is difficult to know any 
of this. 


Finally, while we can speak with some clarity about facets of hacktivism and also 
point to aspects of it that remain ambiguous and unforeseen, there is an 
overarching concern that comes from this discussion that deserves more attention. 
Specifically arising out of the consideration of the fifth portal, Resistance to Future 
War, what are the long term consequences posed for governments and states if 
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individuals, non-state actors, can engage in forms of cyberspacial resistance across 
traditional geo-political borders? This is important question raised by this 
discussion and one that demands more attention to answer properly. But it seems 
clear already that we are at the onset of a new way of thinking about, participating 
in, and resisting war. And that today's nascent hacktivity is part of the trajectory 
towards that new way. 
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CONFIDENTIAL FBI FACSIMILE COMMUNICATION 


The information contained in this facsimile message, and any and alt accompanying documents, 
constitute confidential information. This information is the property of the Federal Bureau 


of Investigation. If you are not the intended recipient of this information, any disclosure, 
copying, distribution, or the taking of any action in reliance on this information is strictly 
prohibited. If you received this information in error, please notify us immediately by 
telephone. 
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Electronic 
—fivil 
—isobedience 


Next Virtual Sit-in on 
December 22 
Anniversary of the Acteal massacre in Chiapas 


Two recent News segments on 

The Electronic Disturbance Theater 
First one is a quicktime mov. from 
New Media News. 

Also 

*How To Make Trouble 


and Influence People* 
by lan Walker 


4 An hour long RealAudio on 


Culture Jammers around the world. 
Featuring interviews with 
RT@Mark, Adbusters, 


; The Electronic Disturbance Theater, 


and many more. 


» | Mid-way into the Sit-In 


at School of the Americas 
on November 22 


Fort Benning countered 


by IP Blocking Address 
We will post updates as more information flows in! 


Recent Action Against 

The Thing's 

Support of FloodNet 

VIOLATION OF THE VERIO 
ACCEPTABLE USE POLICY 

Read About It On Thing.news. In Threads. 


SWARM Chronology 


http://www. thing net/~rdom/ecd/ecd.html 
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floodnet ® ® 
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Next Virtual Sit-in on December 22 
Anniversary of the Acteal massacre in Chiapas. 
About The Electronic Disturbance Theater. 


See The Zapatista Tactical FloodNet for a discussion of FloodNet's 


functionality, interactivity, philosophy, and as a form of conceptual 
art. 


http://www.thing.net/~rdom/ecd/floodnet.html 12/11/98 
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\ FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/15/98 


On December 15, 1998, salt printed off the web 
page located at the URL http: Tints newmedianews Sane 
bin...archive/1998/11/13/TSwebprotest.d 
SA taped the audio interview of 
available at the above referenced URL. 


4, 1998, 
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This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. ane \ 
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Date of transcription 


On December 15, 1998, sa[ _| received a diskette 
containing the WebTrends Web Log Analyzer Report for Ft. Benning 
from Robert Kane, RCERT, 2933 Thunderbird Drive, Sierra Vista, 
AZ. The report showed web statistics from November 20, 1998 at 62) 
05:00:00 through November 23, 1998 09:38:28. 
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Investigation on 12/15/1998 at New York 
File# 288-NY-268557 Date di¢tated 12/15/1998 
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This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 


WebTrendsyWeb Log Analyzer Report e: eng We —O.HIME 


Default Report 
Fort Benning 


General Statistics 


The User Profile by Regions graph identifies the general location of the visitors to your Web site. 
The General Statistics table includes statistics on the total activity for this web site during the 
designated time frame. 


User Profile by Regions 
Bi Total 


User i E ae. United States 


Sessions 


1 Unknown. 


@ international 


General Statistics . 
(Wednesday. December 09, 1998 - 12:39:00. 
“1171/20/98 05:00:00 - 11/23/98 09:38:28 
INA 


iNumber of Hits for Home Page: 
\Number of Successful Hits for Entire Site 
iNumber of Page Views (Impressions): = 3,0 
Number of User Sessions {8,489 

User Sessions from United States. 181:91%. 
International User Sessions 13% ; 
User Sessions of Unknown Origin, 115,07% oe) 

Average Number of Hits Per Day 135,691 

Average Number of Page-Views-Per Day _ 9502: 

Average Number of User Sessions Per Day (2,122 

Average User Session-Length 10071: 
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Most Requested Pages 


This section identifies the most popular web site pages and how often they were accessed. The 
average time a user spends viewing a page is also indicated in the table. 


8 wewberbgannymil 


Mi pipto.im 
User 


Sessions 


BP orpnals.itm 


M certr.tin 


Bt mate.kim 


sereitantie etereet-sitine ete Avanti ttiANte Aten, eetineine nat ttn 


| ~_MostRequestedPages 


- Pages: ; 
i (http:/www.benning.arm mnil/ 
2 


htt, Awww-bennin arm milbhomeftableofcontents/bh toc.htm! 


3 http:/Avww-benning. army.mil/tb/rtbmain:hin | 

nto /www.benning.army.mil/usarsa/center htm - 
5 http:/vww-benning-army.mil/usarsa/main-htm 
ss ihttp:/Avww.benning.army.mil/usarsa/toprt.htm 


Mh ip:/www.benning.army.milusarsafopetr.htm 


8 lta “www. benning.army.mil/rtb/rtbweb/rarscl.htm 


19 ttt “/www.benning.army.mil/usarsaftoplett him. 


He http:/Avww.benning.army.mil/usarsa/right.him 
"Sub Total For thePage Views Above 
“flotalForthe'Log File. 2s 


12/15/98 12:30 PM 
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Least Requested Pages 


This section identifies the least popular pages on your Web site, and how often they were 
accessed. 
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LeastRequested Pages | 


4 ihttp:/Awww-benning. army.mil/rtb/history2/monbrick.htm 


{° |nitp “Aww.bennihg.army.milbhome/acap/OTLEAD FORM. himl 
6 ihitp:/secpoc.army.mil/seintranet’mso/mso.htm 


f \htto:/secpoc.army:mil/seihtranetfhrd/hrd.htin 


8 http:/Awww-benning.army.mil/bhome/ocsfistoryhistory html 
9 lhttp://secpoc.army:mil/PPl/personhel/st52. track/MGRrag_inbox.asp?FOr anizations ARAR&FCPACCode=AR&: 


"IMONROE&FTimes=All Tines&FActions=All Actions&FWhere=CPOC, 


Cee ee tth/1-11 INF/BNHQ@/Mwelcome.htm 


Top Entry Pages 


This section identifies the first hit from a user visiting this site. This is most likely the home page 
but, in some cases, it may also be specific URLs that users enter to access a particular page 
directly. The percentages refer to the total number of user sessions. 
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Bf ocsmats.bin 


__Top Entry Pages 


Vier 
Total | 


657%, 558 


[ seretavmimeans minnie Mere ink Waitt pases to rhtelet tc Rtobees Si sone 


Pages 
a http Awww.benning.army.mil/ 
“hited benninaarmy milusarsal 


Top Exit Pages 


This section identifies the pages users were on when they left the site. The percentages refer to 
the total number of user sessions that started with a valid Document Type. If the session started 
on a document with a different type (such as a graphic or sound file), the file is not counted as an 
Entry Page, and the session is not counted in the total. 


4 of 23 12/15/98 12:30 PM 


WebTrends Web Log Analyzer Report file:///D/Ft Benning Web trend analysis/DEFAULT_b.HIM 
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> ery 


pe FOP EXitPages 
1 | pttp:www-benning.army.milfbhome/ vii_binfh count.exe/tbhome/ | 9, 05K 252 
htt, Muww-bennin arm niibhomeftableofcontents/bh, toc.him eae 
3 {ntto:”wwww.benning.army.mil/ 2.78% | 187 
4 |htto-www.benning.army.mil/tb/rtbweb/rarscl.htm Race eee 
1.72% | 116 


5 ‘http: 7wnw-benhing.army.iil/rtb/_vti_bin/ipcount.exe/RTB/ 


‘ 
© Ibttpivww-benning army milftb/tomain. htm Gone Acne 


| 7 |ntto:/www-benning.army:mi/RTB/ranger/photo/photo:htm aoe fot 
ie [esi eta nacre | acs eee 


1.53% 403, 


9 http: www. benning.arm mil/usarsa/ vii. binfipcountexé/usarsa/ 


140 


O, q 
http:/www-benning.army.milfbhome/ocs/ocsmain.htm 1.51% j a2 


| Total Forthe Pages Above (only sessions starting-.on:a aioe 442 


valid:document:type.are included): 


Single Access Pages 


This section identifies the pages on the site that visitors access and exit without viewing any 
other page. The percentages refer to the total number of user sessions that started with a valid 
Document Type. If the session started on a document with a different type (such as a graphic or 
sound file), the file is not counted as an Entry Page, and the session is not counted in the total 
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B ww bershg annymil 
User Bf igisci.sim 
Sessions A biomes 
Borbmatriim 
8 remate.im 
fa Sten Single Access Pages _ ee 
ae. < oa | 
| | Pages | otat | Sessions 
[10 hittp:/www-benning.army.mil/ ere o ks 
| Total Forthe Pages Above _ [28.99%| 830 
Most Accessed Directories 
This section analyzes accesses to the directories of the site. This information can be useful in 
determining the types of data most often requested. 
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Most Accessed Directories 


{ 
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User a se. 
Sessions : Bi disk object: 


Sat Sun 
Fri 11/20 - Mon 11/23 {1 VYeek Scale} 


If earerenressnmnrlamasauteteevasdqireveannydenweuyrirmhemenn edna PO 


Cached) User | 


Pathto-Directory Se ede 


disk object 


Top Paths Through Site 


This section identifies the paths people most often follow when visiting the site. The path begins 
‘ at the page of entry and shows the next six consecutive pages viewed. 
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elas Aandi hentai nnlh Dre: 


Top Paths | Through Site _ 


RE a AE ae ht IY I at aE ML ong pee Om mn 


‘Pages. 


ete 


1. http: ‘liwww. benning: army: millusarsal 

12. http:/www.benning.army.mil/usarsa/_vti_bin/fpcount.exe/usarsa/ 
4 13. http:/jwww.benning.army. mil/usarsa/main. htm 

4, http:/www.benning.army.mil/usarsa/topleft.htm 

5. http:/www.benning.army.mil/usarsa/left.htm 

(6. http:/www.benning.armiy.mil/usarsa/topetr.htm. 


| 2 [1. http://www.benning.army.mill 11.98% 133 
-}1.-http:/www.benning.army.mil/rtb/rtbweb/rgrscl-htm 11:62% 109: 
1. http:/www-benning.army.mil/fbhome/_vti_bin/fpcount.exe/fbhome/ | 1.45% 98 
(1..http:/www-benning.army.mil/rtb/rtbmain:htm 14.34% 90 
1. http:/Awww.benning.army.mil/rtb/rtbmain.htm 1.31% 88 
1.:http:/www-benning.army.mil/fbhome/ocs/ocsmain.htm 1:31% 88. 
1. http://Awww.benning.army.mil/usarsa/ 10.98% 66 

2. http:/www.benning.army.mil/usarsa/_vti_bin/fpcount.exe/usarsa/ 
41. http: inwww-benining. army; mil/fbhome/tableofconterits/fbhptoc. htm 64 
10/1. http:/Mwww-benning.army.mil/rtb/_ vti_ peuipeou: exe/RTB/ _ 0. 86% 38 


Total:For the Paths Above 14:1%| 947 


Most Downloaded Files 


This section identifies the most popular file downloads for the site. If an error occurred during the 
transfer, that transfer is not counted. 


Most Downloaded Files 


B run.PDF 
User tov ee ig ae |  Awelcome.pdf 
Sessions mae yt 
O pushup.PDF 


Bi situp.PDF 


Fri 11/20 - Mon 11/23 (1 Week Scale} 


12/15/98 12:30 PM 
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6 http://www-benning.army. milifshome/NCOA/Know. pdf 
7 ihttp:/Iwww-benning.army. mil/fbhome/NCOA/bwelcome. PDF 
| 8 ihttp://www-benning.army.mil/fbhome/11th/1-1 1inflagrd/Downloads/welcome. pdf 
9. ih ttp:/iwww-bennina. earmy:mil/fbhome/NCOA/Pac _pldc.pdf 
10{http:/www- benning. army.mil/fbhome/TRAINING/eib/WEib97cn.zip 

{Total For:the Files.Above:.. 


Most Submitted Forms and Scripts 


This section identifies the most popular forms or scripts executed by the server. WebTrends 
counts any line with a Post command or a Get command with a "?" as a form or script, and 
shows only successful hits. 


Most Submitted Forms & Scripts 


B RTB 


0 usarsas 
User 


Sessions 
8 fosearch.htm0.idg 


B tohomes 


Fri Sat Sun Mon 
Fri 11420 - Mon 11/23 (1 Week Scale) 
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Most Submitted Forms & ae oe 


sem cee = rey ai ute ty rites bf meiner Rn eng noe MBL mt tin mt yen em (mA ee eRe Aen remem em 


Forms and/or: pacha 


‘oa 
461 [14.95% 
“407 | 13.2% | 
361 {11.71%} 
{ 293 | 9.5% | 
{ 10 =e 
1.71% | 
(1.03% 
s 084%{ 19 


0.77%{ 8 | 


Most Downloaded File Types and Sizes | 


This section identifies the accessed file types and the total kilobytes downloaded for each file 
type. Cached requests and erred hits are excluded from the totals. 


Most Downloaded File Types 


800000 , 1. gif 
a 2. jpg 
me 600000 : 3 HTM 
ota 4. html 
Bytes 400000 BS mill 
' §. exeffbhame/ 
200000 Hi 7. exefRTBY 
0 Z 8. class 
O 9. idq 
1.2.3. 4.5. 6. 7. 8. 9. 10. Hf 10. exe/usarsat 
Top Items 
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Most downloaded File Types 


| File-type Files | K Bytes Transferred 


“28,605 206,804K 


3,319 52,839K 
milf . a 1,426 i 18,518K | 
[exe/fbhome/ 1,194 _ 795K 

‘jexeiRTBI 664. 


574 
Bail 
426 


This section identifies the IP address and/or domain name and their relative activity level on the 
site. WebTrends cannot differentiate between different users using the same IP address. 


Top Users _ 


epmceneestteie ae tehnatelaettebipttenithinnmnaintmmanetadetieametanertesemrtctiiiat tte tetramer 


pare setesetngineiit inane 


|_1 iresnet-19-202.dorm.utexasiedu 131690. | 2.72% | 1 
| 2 Ippp-206-170-2-69.sntc01.pacbell.net | 2.288 | 1.6% 2 
3 jsl6.thing.net _ iia 4,694 | 1.18% | eae 
{150.114.70.93 | | 661 | 0.46% | 1 
ee ) 546 | 0.38% | 4 
| 6 {xensei-ppp-0247.xensei.com T5380 f 0.37% 
| 7 (143.77.166.231 492 | 0.34% | td 
8 (129.72.206.32. ee ; 476 | 0.33% | 3 | 
9 lokenase-97.ionetnet Te ABB 10-32% Fo | 
[10 [ftsumter.acert.belvoir.army.mil | 443 | 0.31% | 3 
SubtotalforUsersAbove 14,488.) 8.04% FO 19 
“Total 42,264] 100% | BABS 


Most Active Countries 


This section identifies the top locations of the visitors to the site by country. The country of the 
user is determined by the suffix of their domain name. Use this information carefully because this 
information is based on where the domain name of the visitor is registered, and may not always 
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"be an accurate identifier of the actual geographic location of this ‘4 (for example, while a vast 
majority of .com domain names are from the United States, there is a small minority of domain 
names that exist outside of the United States. ) 


Most Active Countries 


Hf United States 
O canada 
en 0 Singapore 
User a P B Germany 


Sessions 4 Hf australia 
a0 ; f "| Netherlands 
Japan 
H PR 
O Switzerland 
Et italy 


[ ee Most Active Countries - 


___ Countries TY ser Sessions 
6,954 


12 — | - | ; | | | | 9 . _ 
13. {Norway . 6. 
14 {Austria _ { 4 _ 


15: \Czech Republic | 4 


North American States and Provinces 


This section breaks down web site activity to show which of the North American States and 
Provinces were the most active on the site. This information is based on where the domain name 
of the visitor is registered, and may not always be an accurate representation of the actual 
geographic location of this visitor. This information can only be displayed if reverse DNS lookups 


12 of 23 12/15/98 12:30 PM 


. WebTrends Web Log Analyzer Report 


file///D/FLBenning Web trend analysis/DEFAULT bHIM 


z . 
& 
*& * 
. 


have been performed. 


Virginia 
California 
Oregon 
User Maryland 
Ohio 
Georgia 
Ontario 
Texas 
0. Florida 


i= 
pe i  a a” al 
TE A SS CE SS POE RR SEE, Ree 


a4. 
O 2. 
O 3. 
Ba. 
Sessions Wl 5. Washington 
6. 
a7. 
Hs. 
0 3. 
| 


2. 3. 4. 5. 6. 7. 8. 9. 10. 
States 


es | “Slate : ae Mie User Sessions 

1 Virginia . i: i 3,853 

2 [California | | | 80 

SS Shi Bese LN is ac te ls Seno om sealiatee 

wis 
| 6 | f 

: : : _ 

9. Texas. : 5 ! 
10 iFlorida oe whe i. 4 
__fLotalFortheStatesAboyve ~ 4035 ° || 


Most Active Cities 


This section further breaks down the site's activity to show which cities were the most active on 
the site. This information is based on where the domain name of the visitor is registered, and 
may not always be an accurate representation of the actual geographic location of this visitor. 
This information can only be displayed if reverse DNS lookups have been performed. 
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Most Active Cities 


B 41. Vienna, Virgini 
O 2. Falls Church, ¥ 
Ol 3. Medofrd, Oregon 
User Mi 4. San Jose, Calif 
Sessions Hi 5. Springfield, Vi 
' §. San Francisco, 
1 7. Norfolk, Virgin 
BH 8. Beltsville, Mar 
Gi 9. Mountain view, 
1.2.3.4. 5. 6. 7. 8 9. 10. Hf 10. Seattle, Washi 
Cities 
Activity | by ae 
rene hes nieces aa aes secrete eters eer epee thaternematinmaernetrmsntcameregutmaimennateon meter ates “User pleat 
aa — City, State Pe 2 ‘Soe 
ie Vienna, Virginia, United States te 3,658 
: Falls Church, Virginia, United States -_ 148 
3 {Medoffd,-Oregon; United States a 41 
4 {San Jose, California, United States 
‘5 {Springfi eld, Virginia, United States 7 ; 26 
ee _ {San Francisco, California, United States Ieee. a ne { 24 | 
|_ 7 iNorfolk; Virginia, United States | 19 


Most Active Organizations 


This section identifies the companies or organizations that accessed the site the most often. 
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Most Active Organizations 


1. aol.com 
2. army.mil 


Ol 3. utexas.edu 

User M4. uu-net 

Sessions Bt 5. mindspring.com 
i’ 6. attnet 
M7. afmit 
8. bellsouth.net 
0 3. thing.net 
1.2. 3.4.5.6. 7. 8 9. 10. M10. pta.net 
Organizations 
Most Active O 
SRO ire r Se nema eecetoen rteertan emt ater tnt — 


Organizations 


cuales one 12.79% 3,658 
ae mil | } 5,74 | 4.35% | | 226 | 
3 | texas.edu a | 3,890 | oe } 1 | 

Uunet Technologies Inc. ee? CRO: ane aS ae aias cas, 

4 {uti.net 3,882 2.94% 148 


0, 
mindspring.com _ 2,203 z ashes 


1,953, | 1.48% 


7 af. mil | 1,801 i 1.36% 


1,748 | 4.32%. 46 
| 1.3% | 3 | 


jbellsouth:net 


ithing.net 


_jptd-net = 
[Subtotal For Companies Above | 39,850° 


Organization Breakdown 


This section provides a breakdown by types of organizations (.com, -net, .edu, .org, .mil, and 
-gov.) This information can only be displayed if reverse DNS lookups have been performed. 
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| Organization Breakdown 


Government 
Organization 
Military 
Education 
Company 
Network 


User 
Sessions 


eae 


Fri Sat Sun Mon 


| Grganlzaton Breakdown = 


iain | ednitewohtsnatie  eetclermn title Lunctchane ieee hnishtawnct se erahidetetctmetemonnrmitntet tiring. tsi 


sm ceapetcetareign eta afta phn eene te pllseg nde ate 


Network i 39-81 1,614 
"2 [Company 4,520 
| 3 jEducation = an : “13,686 t "13.5806 350 
[4 {Military 9,158 | 8.93% a 
5 lOrganization = =————éiEC@*~tséS90 0.96% | | 
_§ {Government _ Si 20ccs tetas 823 0.8% a 


Summary of Activity for Report Period 


This section outlines general server activity, comparing the level of activity on weekdays and 
weekends. The Average Number of Users and Hits on Weekdays are the averages for each 
individual week day. The Average Number of Users and Hits for Weekends groups Saturday and 
Sunday together. Values in the table do not include erred hits. 
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Summary of Activity for Report Period 
Average Number of Users-per.day on. Weekdays 1,792 
Average Number of Hits per day on Weekdays ) 30,613 
jAverage Number of ‘Users for the entire Weekend 14,905. 
{Average Number of Hits for the entire Weekend 181,538 
Most Active Day of the Week ) [Sun 
Least Day ofthe Week [Tue | 
[Most Active Day Ever [November 22,1998 
jNumber of Hits on Most Active Day ) 146,378 ) | 
Least ActiveDay Ever 


’ 


~ 


went asestntuninnanen | NOVEMbEF 23, 1998 
|Number of Hits on Least Active Day 19,360 


Summary of Activity by Time Increment 


This section helps you understand the bandwidth requirements of the site by indicating the 
volume of activity in kilobytes transferred. The table provides various measures of activity by unit 


of time for the report period (the unit of time depends on the amount of time covered by the 
report, and will be the day in most cases). 


Bandwidth 


Total K 
Bytes 


Fri Sat Sun. Mon 
Fri 11/20 - Mon 11/23 (1 Week Scale} 


__ Summary of Activity by Time Increment 


testa te Same 
f oe 
feos | 


920 | 38,100 [8,021 
111/22 . | 46,378 15,557 | 


Mores Sp | 


 Fimeinterval . 


[3.436 
‘1142,764/38,011) 7,405,076 | 8,488 


453,056 
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Activity Level by Day of Week 


This section shows the activity for each day of the week for the report period (i.e. if there are two 
Mondays in the report period, the value presented is the sum of all hits for both Mondays.) 
Values in the table do not include erred hits. 


Activity Level By Day of Week 


= 4 
$5 


User 
Sessions 


CT fas 
NOOB WN 
=a 
Cc oO OD 
Qo 


a 
on 
ay 

ctr 


smo macestin ie aH rie seme oi ied 


[% Pee User r Sessions 
“| 32.48% | 2436 
13.56% | 924 | 
0% jf 0 
0% 0 
: ae ee 
41,866 | 29.32% | 2,660 


35,160. 2462% .| —-2;469 
61;226. | 42.88%. | 3,58 
81,538 | 57.41% | 4,905 


‘Total: Weekend 


Activity Level by Hour of the Day 


This section shows the most and the least active hour of the day for the report period. The 
second table breaks down activity for the given report period to show the average activity for 
each individual hour of the day (if there are several days in the report period, the value presented 
is the sum of all hits during that period of time for all days). All times are referenced to the 
location of the system running the analysis. 
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User 7 Eee 
Sessions [LoS 


an he ; ee il Ae B41. 1000-1059 
B 12. 1120-1159 
1. 3 5 F @& 14. 13. 16 17. 19. 21. 23. 
| 


2 4. 6 8 10. 12. 14. 16. 18 20. 22. 24. 
Hours 


13, 1200-1259 
14. 1910-1359 
15, 14001259 


Hour 


00:00-00:59 
01:00-01:59 
:02:00-02:59 
03:00-03:59 


2,627 | 1.84% [ 158 | 
{2,141 [149% { 119 | 
| 2,494 | 1.74% | 106 


2,357 | 1.65% 128 


04:00-04:59° 2,869 2% 192 
05:00-05:59 { 4,425 { 3.09% | 298 
06:00-06:59 i 8,378 | 5.86% 533 

107:00-07:59 ' { 12,649 | 8.86% | 598 
08:00-08:59 113,731 9.61% 397 


597 
09:00-09:59 17,374 | 5.16% | 404 
{10:00-10:59 "7,107 | 4.97% | 432 
\11:00-11:59 , [6578 | 46% | 348 | 
12:00-12:59 7908 | 5.53% | 380 


13:00-13:59 8,261 | 5.78% 448 


14:00-14:59 16318 | 4.42% | 413 
{15:00-15:59 {5595 | 3.91% {| 350 | 
16:00-16:59 | eae | 4.7% | 433 | 
17:00-17:59 7,015 | 4.91% | 432 | 
118:00-18:59° ~ | 5,865 | 4.1% | 384 __ 
19:00-19:59 6.139 | 4.3% | 461 


20:00-20:59 ee —- 5865 | 41% | 418 | 
21:00-21:59 | 3,658 | 256% | 300 | 
22:00-22:59 [3,428 | 2:4% 288. 

23:00-23:59 {3,266 | 2.28% {| 269 | 
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‘ , [Total Users.during. Work Hours (8:00am-5:00pm) 


al Usats during Aer Hours (6CipincFSBan 


rot __ {69,588/48.74%! 3,805: 
Total Users during After Hours (5:01pim- 


(73,176,51.25%! 4,684 _ 


Technical Statistics and Analysis 


This table shows the total number of hits for the site, how many were successful, how many 
failed, and calculates the percentage of hits that failed. lt may help you in determining the 
reliability of the site. 


Technical Statistics and Analysis 


Cached Hits as Percent . ee . se : a a 11.32% 


Forms Submitted By Users 


This section shows the number of successful form submissions compared to the number that 
failed. WebTrends considers anything with Post command as.a form. 


Forms Submitted By Users 


18.7% H Successful 
Percent Forms S 
of Total 
Hits 
O Failed 
Forms Subm 
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+; _.... Forms Submitted ByUsers 
| Type | Hits | % of Total 


Successful Forms Submitted | 3,082) 81.31% 
708 i 18.68% 


3,790; 100% 


Client Errors 


This section identifies the type of errors which were returned by the Client accessing your server. 


Client Errors 


404 Page aor File 


Percent 
of Total 


Hits ee 403 Forbidden Ac 


3 O00 Incomplete } 


401 Unauthorized 


400 Bad Request 


Client Errors 


AH Ome a ea ee i Sa on Na eH a AA | am YA Se 


{404 Page-or File Not Found ane 8,523 172.41% 
000 Incomplete / Undefined _ 
403 Forbidden Access 


401 Unauthorized Access 
1400 Bad ‘Request 
Total 


Page Not Found (404) Errors 


This section identifies "Page Not Found" (404) errors which occurred on the server. 
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Page Not Found (404) Errors 


16.9% B itpwwwbenig. 
29.5% 
Percent Ml itpvwwbentg. 
of Total 17.1% 
Hits Ho btpawubenstig. 


Bi stpvwwwbeahig. 


af 
19.3% 17 3% 
Bl ttpaeowberslig. 


Page Not Found Errors 


__ Page NotFound (404)Errors 
‘Targét URL and Referrer — 


http:/www.benning.army.mil/fbhome/Training/bkgMain.JPG: 
(no-referrer) 
http:/hwww-benning.army. mil/fohome/MAPS/imagesi/limegreen. gif 

(no referrer) 
inttp:/iwww.benning.army.mil/What_about_the_accusations_that_the,.School_teaches_torture_and_murder 
(no referrer) 

http:/Awww.benning. army. mil/human. rights training/_ Additionally, human_| rights. are _continuously_discus 
\(no referrer) 

ihttp://www.benning.army: milWhy_ ‘do. some_: demonstrators . want_to_go_to jail 

i(no-referrer) 

HEP: /iwww.benning.army. mil/Does_’ the _ School_really_have_a_Hall_: of | Fame_or_Hall_: of Shame_as_cited_ 
http:/Awww-benning.army.mil/fbhome/11th/Airborne/3D Diamond.gif 

{(no-referrer) 

http://;www.benning.army.mil/other_words, they_lost_the _war,_' were _expelled_ from_the_region,_and_ now 
\(no referrer) 

http:/iwww. benning.army.mil/What_about_the_torture_manual_issue/is_this_true?_No/_There_were_seven 
(no referrer) ; 
http:/Awww.benning.army.mil/they_believe_that_Latin_American_ countries. do_not_have_the_inherent_rigl 
(no referrer) _ 


This section identifies by type the errors which occurred on the server. 
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Server Errors 


0, 
ae M 501 Not 
Percent Implemen 
of Total 
Hits 
502 
is Temporarily 
93.7% 0 
Errors 
sy earn = ee a 
secstae tntsttites dil EO ease oh Ait tat 
501Notimplemented 1 2,509 198.66% 
502 Temporarily Overloaded a i 34 {1.33% 
Total: - i 


This report was generated by WebTrends. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 12/09/1998 


To: FBIHO Attn: maf 


Case ID #: 288-NY-268557 +Pemdtimgt4O Pe 


b7C 


Title: TURBANCE THEATER; 


CITA 
OO: NY 


Synopsis: Current status of ELECTRONIC DISTURBANCE THEATER (EDT) 
investigation. 


Administrative: Re: telcal between sa[_jana m[ on 


12/09/1998. 
b6 


Details: Information provided below is supplied pursuant to IA Bye 


request for information and status of investigation of 
EDT. This analysis is merely a summary of the facts and 
investigation at this time. 


EDT is a group which claims on its Internet web site to 
protest various national and international policies through 
orchestrated attacks on computer systems. The attacks employ a 
program called “FloodNet” which causes a denial of service to 
targeted computers. EDT’s Internet web site solicits visitors to 
participate in coordinated attacks of computer systems chosen by 
EDT. Participants simply click on the FloodNet icon on the EDT 
web site ata predetermined and published date and time. 
Clicking on this icon initiates a Java applet. The initial 
version of the applet caused repeated reloading of files from the 
victim’s computer system at an unusually high rate. Further 
versions of the applet have used the same repetitive reloading 
technique modified to optimize the impact on a targeted web site. 
This activity, when multiplied by many users, will cause service 
interruptions and possibly crash the server comput et unless, earl 
detection is made and countermeasures are implemesbad NMG PanK es 
visitors do not control the destination of the a a orate - 
meagramed into the applet on the EDT’s web sit 


DEC 10 1998 


i Fis mo ie pont 
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To: FBIHQ From @ New York e@ 
Re: 288-NY-268557, 12/09/1998 


EDT claims to have orchestrated at lease five other 
attacks on targeted web sites. The NYO’s investigation is 
focusing on two of EDT’s most recent FloodNet attacks. The first 
of the attacks under investigation occurred on 09/09/1998. This 
attack targeted Mexican President Zedillo’s web site, the 
Frankfurt Stock Exchange web site, and a Department of Defense 
web site: defenselink.com. The Department of Defense’s initial 
analysis of the attack showed a fourfold increase in Internet 
traffic. This increase continued even after traffic was blocked 
from Austria, the origin of a significant portion of the traffic. 
The attack resulted in a severe increase in server latency which 
would have crashed the system without the active efforts of the 
defenseLINK system administrators. Analysis of this attack 
continues. 


The second attack targeted the School of the Americas 
(SOA) web site, resident on the computer system of Ft. Benning, 
on 10/22/1998. Because of EDT’s public announcement of this 
attack on its web site, SOA, with the assistance of the Defense 
Department computer emergency response team, was able to minimize 
the effect of the attack. Although prepared for the attack, Ft. 
Benning’s computer systems suffered a slow down in computer 
response time similar to the DefenseLINK attack. Analysis of 
this attack continues. 


Another attack is planned for 12/22/1998 in 
commemoration of the Acteal Massacre in Chiapas, Mexico. No 
target has been publicly announced nor identified. 


Subject [has announced through his web site bé 
that EDT intends to release the FloodNet Java applet to the b7c 
public on 01/01/1999. This release will allow non-EDT 
individuals to modify the applet and solicit attacks on targets 
of their choosing. The potential impact of the release of the 
Java applet is not significant due to the fact that a similar 
Java applet would not be difficult to author. However, the 
release would permit individuals without significant programming 
ability to use the FloodNet premise for their own designs. 


The case has been presented to the Office of the United 
States Attorney for the Southern District of New York and has 
been assigned to an Assistant U.S. Attorney. Both the U.S. 
Attorney's Office and NYO is continually examining its 
investigative strategies paying close attention to potentially 
sensitive media topics involving freedom of speech and right to 
protest. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 12/08/1998 


To: New York 


ORG on 
| paTE_ VQ BAN 


From: New York 
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case ID #: 288-NY-268557 iN 
Title: CE THEATER; 
CITA; 
00: NY 
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Details: Subject Electronic Disturbance Theater (EDT) is a group 
claiming on its Internet web site to protest various national and 
international policies through orchestrated attacks on computer 
systems. The attacks employ a program called “FloodNet” which 

causes a denial of service to the target computer. To date, the 

EDT has orchestrated attacks on Federal Government computer b6 
systems as well as foreign government computer systems. b7c 


b7E 
satis in the process of eee 2 Ft. 
Benning for all Internet traffic on Uring the EDT’s 


FloodNet attack of their web site for the School of the Americas. 
DefenseLink, a Pentagon site, has also 
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~ Sate: 15:00%'45 
From: 
Subject: IsWLEDT-Floodnet~White House website-tomorrow (Friday) ] 


To: See Below 


Subject: INFOWAR: CALL FOR FLOODNET ACTION FOR PEACE IN THE MIDDLE EAST 


Date: Thu, 17 Dec 1998 11:41:53 -0500 1 
From: 

Reply-To: infowar@aec.at 

To: "infowar@aec.at" <infowar-en@aec.at> 


ce Oe en ae ee Oe td WY OD Or OO SO ee ON SP ert SOO ae OE et ND OD See Shh SO Se ne OR SEY Re LG NO SY nm OD a SE GS mw eT re mS Se Se 


ARS ELECTRONICA FESTIVAL 98 INFOWAR. information.macht.krieg Linz, 
Austria, september 07 ~ 12 http://www.aec.at/infowar 
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>From the Blectronic Disturbance Theater 


CALL FOR FLOODNET ACTION FOR PEACE IN THE MIDDLE EAST VITRUAL SIT-IN ON 
THE WHITE HOUSE WEB SITE 


co 
Friday, December 18, 1998 <—~ “\ower 


FROM 16:00 AM TO 4:00 PM (Washington D.C. TIME) 
FROM 4:00 PM TO 10:00 PM (GMT~ GREENWICH MEAN TIM) 


http://www. aurorablue.org/projects/rdom/zapsPublic/ddkfoyer.htm 


RAK KK KIRK KR KK IK aR aK KKK 


We oppose the U.S. military attack on Iraq and believe that the timing 
of this assault is designed to detract attention from President 
Clinton's impending impeachment hearing in Congress. 


We do not accept the logic of the White House and the Pentagon that Iraq 
poses a national security threat. If any country is guilty of harboring 
weapons of mass destruction it is the United States. 


We know that the U.S. government views the Middle East as a strategic 
area because, in part, it is an oil rich region. And we know the United 
States consistently uses the veil of "national security" as a means to 
pursue and justify its agenda of global economic domination. 


We support the skeptical and angry views of the Russian, Chinese, and 
Iraqi ambassadors to the United Nations Security Council who strongly 
voiced their opposition to U.S. and U.K. aggression against Iraq. 


We are saddened by the images on CNN of the inridcent people who were 
injured in the first hours of the aerial bombardment. Moreover, we are 
aware that these victims are just a few of the hundreds of thousands of 
Iraqis who have either died or suffered greatly sine the first Gulf War 
in 1991 and under U.S. backed sanctions that have existed since then. 
We support the lifting of sanctions against Iraq. We support the 
efforts of international human rights organizations, groups like 
Friendship Across Frontiers, and other sectors of international civil 
society who have been working for years to help the Iraqi people. 


We do not support Saddam Hussein but we believe it is not our right as 
Americans to go beyond merely having opinion. It is up tg the Iraqi 
people, and others in the Arab world, to remove Saddam Hussein from 
office, if that is their desire and will. 


We believe the age of imperialism should come to an end, It is quite 
telling that the imperial power of the 19th century, Great Britain, and 
the imperial power of the 20th century, the United States, have joined 
forces alone as we enter the 21st century. 


In one instance, we agree with a characterization of the United States, 


b7C 
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ste, page by Iraqi leaders. WD; cory of U.S. military and in sconce 
ntervention, both covert and overt, in Latin America, Asia, Africa, the 
Middle Bast, and domestically within sovereign Native American 
territory, is enough evidence to support the classification of this 
country as an Evil Empire. 


We support all efforts to denounce, oppose, protest, and resist the 
joint U.S.-U.K assault on Iraq, both domestically within the United 
States and England, in other European countries, in Middle Eastern 
countries, and throughout the world. 


We recognize that resistance to the current bombardment of Iraq, and 
resistance to all future war, will take place in two spheres. One is on 
the ground, in the streets, in offices, in universities, in factories ~ 
in real spaces. The other is on the Net, in what the Pentagon now calls 
“battlespace." And we support the development and practice of joint 
virtual-real actions of resistance. 


We do not believe that only nation-states have the legitimate authority 
to engage in war and aggression. And we see cyberspace as a means for 
non-state political actors to enter present and future arenas of 
conflict, and to do so across international borders. : 


We do not know how long the current U.S.-U.K. aerial assault on Iraq 
will last. Indications are that it will be short~lived. It may 
therefore not be an appropriate or strategic moment to attempt to 
inspire, coordinate, and sustain a campaign of virtual-real actions of 
resistance. 


We do feel, however, compelled to take some action. And therefore we 
will use FloodNet, the same tool we have been using against web sites of 
the Mexican government, to now make a symbolic gesture of our opposition 
to the current assault on Iraq. 


We therefore urge all people of good conscience who have the clarity of 
mind to oppose these aerial assaults to join us in a ongoing, 
nonviolent, virtual sit-in on the White House web site. We urge you to 
join us in a FloodNet Action for Peace in the Middle East. 


KEKE KIKI RE REE EKER KE KEKEKEKK KK KKK IK 
Friday, December 18, 1998 
FROM 10:00 AM TO 4:00 PM (Washington D.C. TIMES) 
FROM 4:00 PM TO 10:00 PM (GMT- GREENWICH MEAN TIME) 
http: //www.aurorablue.org/projects/rdom/zapsPublic/ddkfoyer.ntm 
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ZEN/DIRNSA FT GEORGE G MEADE MD//NSOC/SIPO/IPA///IMMEDIATE/ 
ZEN/WHITE HOUSE NATIONAL SECURITY COUNCIL WASHINGTON DC/IMMEDIATE/ 
FBI NEW YORK/IMMEDIATE/ 

FBI WASHINGTON FIELD/IMMEDIATE/ 

BT : 
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CITE: //1332// 

PASS: DIRNSA FOR ZKZK OO ZSL DE; WHITE HOUSE SITUATION ROOM 


PLEASE PASS TO EOP SECURITY OFFICE. 


SUBJECT: NIPC COMPUTER INTRUSION ALERT: ALLEGED PLANNED ACTS OF 

ELECTRONIC DISRUPTION TO TARGET WHITE HOUSE WEB SITE ON DECEMBER 18. 
REFERENCE: DIRECTOR FBI WASHINGTON DC 090305Z SEP 98 (NOTAL), 

CAPTIONED QUOTE ALLEGED ACTS OF ELECTRONIC DISRUPTION TO TARGET 

CERTAIN U.S., MEXICAN, AND GERMAN INTERNET-BASED SITES AND 

SERVICES, SEPTEMBER 9 THROUGH NOVEMBER 22, 1998, IN SYMPATHY WITH 

ZAPATISTA MOVEMENT UNQUOTE. 

WARNING NOTICE: ALTHOUGH UNCLASSIFIED, THIS COMMUNICATION SHOULD NOT 

BE FURNISHED TO THE MEDIA OR OTHER AGENCIES OUTSIDE THE LAW 

ENFORCEMENT/U.S. GOVERNMENT COMMUNITY WITHOUT THE PERMISSION OF 


THE FBI/NIPC. UNAUTHORIZED DISCLOSURE OF FBI COMMUNICATIONS COULD 


* 
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JEOPARDIZE ONGOING FBI INVESTIGATIONS. 

1. AN ENTITY KNOWN AS THE QUOTE ELECTRONIC DISTURBANCE THEATER 
UNQUOTE (EDT), HAS CALLED FOR A QUOTE VIRTUAL SIT-IN ON THE WHITE 
HOUSE WEB SITE FROM 10:00 AM TO 4:00 PM (WASHINGTON, D.C. TIME) 
UNQUOTE ON DECEMBER 18. THIS IS THE LATEST ROUND OF ACTIONS CARRIED 
ON THE EDT’S PUBLICLY-ACCESSIBLE WEB SITE (HTTP: //WWW.THING.NET/ 
(TILDE) RDOM/ECD/ECD.HTML). IN A RECENT MASS E-MAILING, THE EDT CLAIMS 
ITS ACTIONS HAVE BEEN PROMPTED BY THE RECENT COMBINED U.S. AND UK 
COMBINED MILITARY ACTION AGAINST IRAQ. THE EDT IS A GROUP CONSISTING 
OF ACTIVISTS WHO HAVE, IN THE PAST, PRIMARILY TARGETED U.S. AND 
MEXICAN GOVERNMENT SITES IN SUPPORT OF MEXICO’S ZAPATISTA NATIONAL 
LIBERATION ARMY (EZLN) . 

2. THE EDT HAS A HISTORY OF CARRYING OUT ITS THREATS UTILIZING 
FLOODNET, A DENIAL-OF-SERVICE SOFTWARE TOOL, DESIGNED TO DISRUPT 
ACCESS TO TARGETED WEB SITES BY FLOODING THE HOST SERVER WITH 
REPEATED REQUESTS FOR THAT WEB PAGE. TO ACCOMPLISH THIS, FLOODNET 
USERS SIMPLY LEAVE THEIR BROWSERS OPEN, WHICH ALLOWS THE FLOODNET 
APPLET TO AUTOMATICALLY RELOAD A TARGET WEB PAGE EVERY FEW SECONDS. 
THIS TOOL ALSO ALLOWS THE USER TO POST HIS OWN MESSAGES ON THE TARGET 


WEB PAGE. 
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3. ON SEPTEMBER 9, 1998 THE EDT MOUNTED AN UNSUCCESSFUL ATTACK ON A 
DOD WEB SITE USING FLOODNET. ON OCTOBER 5, 1998, THE GROUP SPONSORED 
A DEMONSTRATION OUTSIDE THE FEDERAL COMMUNICATIONS COMMISSION (FCC) 
HEADQUARTERS BUILDING IN WASHINGTON D.C. THE GROUP STATED THAT IT WAS 
QUOTE PROTESTING THE FCC’S ROLE IN SUPPRESSING FREE SPEECH ON THE 
AIRWAVES UNQUOTE. ON NOVEMBER 22, THE GROUP TARGETED THE U.S. ARMY’S 
SCHOOL OF THE AMERICAS WEB SITE FOR A FLOODNET ACTION. 

4. NATIONAL INFRASTRUCTURE PROTECTION CENTER (NIPC) COMMENT: THE 
EDT’S PAST ELECTRONIC CIVIL DISOBEDIENCE ACTIONS HAVE SHOWN IT IS 
DETERMINED TO PURSUE ITS ANNOUNCED AGENDA. HOWEVER, BASED ON ITS PAST 
ACTIONS, THE EDT DOES NOT APPEAR TO POSSESS THE SOPHISTICATION AND 
ORGANIZATION TO POSE A SERIOUS, WELL-COORDINATED CYBER THREAT AT 
PRESENT. AT THE SAME TIME, ITS POLITICAL AGENDA HAS BEEN SOMEWHAT 
SUCCESSFUL DUE TO THE MEDIA COVERAGE IT HAS RECEIVED. 

5. CONTACT POINT IS tue[ sda [| Pie 
6. LEGAT LONDON: PLEASE NOTIFY APPROPRIATE BRITISH GOVT. 
REPRESENTATIVES FOR THEIR INFORMATION. 
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lisobedience 


Next Virtual Sit-in on 

December 22 

Anniversary of the Acteal massacre 
in Chiapas 


Two recent News segments on 

The Electronic Disturbance Theater 
First one is a quicktime mov. from 
New Media News. 

Also 

*How To Make Trouble 

cand Influence People* 

by lan Walker (4 
An hour long RealAudio on 

Culture Jammers around the world. 
Featuring interviews with 

RT@Mark, Adbusters, 

The Electronic Disturbance Theater, 
and many more. 


Mid-way into the Sit-In 
at School of the Americas 
on November 22 


Fort Benning countered 


by IP Blocking Address 
We will post updates as more 


information flows in! 


4 


G 
Recent A¢tion Against 
The Thing’s 
Support of FloodNet 
VIOLATION OF THE VERIO 
ACCEPTABLE USE POLICY 
Read About It On Thing.news. In 
Threads. 
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You have three choices on this page: you can Sie haben drei Méglichkeiten auf dieser Sei 
k6nnen 

1. subscribe to the English mailing list; 
2. to the German mailing list; 


3. or to both mailing lists. 


1. die englische mailing list abonnieren; 
2. die deutsche mailing list abonnieren; 
3. oder beide mailing lists erhalten. 

As mentioned in the instructions, this is an 
experiment; the main focus of the discussion will 
take place on the web page, but we don't want 
anyone to feel left out, so here we offer you the 


Diese Seiten stellen ein Experiment dar, wie 
der Anleitung erwahnt; das Augenmerk der 
wird auf der Webseite liegen, aber wir wolle 


choice to subscribe to the mailing list in the 
language of your choice. In order to get the 
whole discussion, you will obviously have to 
subscribe to both lists (or read it on the web 


site); but for those of you who prefer only one 


language, the mailing list would be the safest 
bet. 


This form allows you to subscribe to the Info 


ausschlieRen, so dak wir hier die Méglichke 
eine mailing list in der Sprache Ihrer Wahl z 
abonnieren. Um alle Beitrage verfolgen zu k 
mussen Sie natirlich beide Listen abonnier« 
Webseiten lesen); doch ftir diejenigen, die li 
einer Sprache lesen wollen, ist die mailing li 
Wahl. 


Diese Form erlaubt es Ihnen, die deutsche | 


War English-language mailing list, which directs 
messages to be delivered to your Internet e-mail 
address. You will receive e-mail confirmation of 
your subscription. You can also use this form to 
change the name associated with your 
subscription. Just enter the same address under 
which you are subscribed with Majordomo and 
enter a new name. \ 


mailing list zu abonnieren, die Nachrichten < 
Internet e-mail Adresse liefert. Sie bekomm« 
e-mail eine Bestatigung Ihres Abonnements 
k6énnen diese Form auch verwenden, um de 
e-mail Adresse assoziierten Namen zu ande 
mussen nur die gleiche e-mail Adresse ang 
der Majordomo Sie kennt, und Ihren neuen 
eintragen. 


Your Full Name: Ihr Name: 


b6é 
b7¢ 


Your Email Address: 


[ Subscribe [Reset | 


Ihre Email-Adresse: ee 


[Subscribe |[ Reset] 
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When art meets cyberwar 
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PERHAPS THE FIRSY electronic ‘ 
attack against a target on 
American soil was the result of an 


art project. 
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It ail started in January of this 
year in chat rooms and 
newsgroups, when political 
activists, protesting the Mexican 


Adam A : 
Penenberg is a Government's suppression of 


senior editor at Chiapas, organized. "virtual 
Forbes sit-ins" on Mexico City financial 
magazine.and institutions. For such a 
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Digital. Tool. Protestors were instructed to surf [} Gharcs denied 

to one of the offending pages and 1} grpattuctitas. 2 
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Realizing they were on to something, two activists, 
Ricardo Dominguez, a classically-trained actor, and. 
Stefan Wray, a graduate student at New York 
University, decided to make an art project out of 
organizing political protests aver the internet. Brett 
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Stalbaum, a Java programmer and graduate art rh s 
student at San Jose State University in California, 4 | 
told them he could automate the process. Together, [i 
they formed the Electronic Deeb Theater. i } 

! i i 
Stalbaum coded a Java applet he called FloodNet, | i ‘ 
which would, when accessed, launch a denial of le en 
service attack, As a Java reload function, it would i Enter sista ba acca 
request search engines on targeted sites to look up i : : 
words like "justice," “egalitarianism” and “human iff i 
rights" every seven seconds. The sheer number of = si 
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requests for information would slow down site 
traffic to a crawl-- as if protestors had actually 
showed up and barricaded themselves inside the 
site. 


On Apr. 10, eight thousand protestors visited the 
The Electronic Disturbance Theater site over a 
four-hour period, clicked on the FloodNet button 
and intermittently blocked Mexican President 
Zedillo's site. (Lronically, Zedillo's search engine 
replied that words like "justice," "egalitarianism" 
and "human rights" were not to be found anywhere 
on the site.). The group organized two more similar 
electronic events in May and June. In the second 
one, Mexican programmers had gotten wise and 
deployed a Java applet of their own, which 
successfully parried FloodNet. 


: 
| 
i 
| 
| 
| 
| 
By then, the Electronic Disturbance Theater was a | 
rising: star in lefty activist circles, and in September, 
Dominguez and Wray were invited: to speak at Ars 
Electronica, an art and technology conference held 
in Austria. While there, they planned their biggest | 
event: A. simultaneous attack on Zedillo's web site | 
(again), the Pentagon and the Frankfurt Stock 
Exchange. 
But this time, the protestors were attacked im their’ | 
own right. Stalbaum suspects.that Pentagon | 
programmers detoured FloodNet traffic into a 
hostile applet of its own, which caused browsers to 
crash. "They even called their applet ‘hostile 
applet,'" says Stalbaum, who dissected it. : 
| 
: 


Dominguez loves the intrigue. "As a person of the 
theater, I couldn't have created a better script--the 
drama, the conflict." 


This net-based counterattack, although minor in 
scope, raises important national security issues. 
Since the American military is not supposed to act 
within the nation's borders unless. specifically 
directed, does the Pentagon have the right to 
counter any of the hundreds of hack attacks it 
receives every day with cyberattacks of its own? If 
so, will it be allowed to target sites in the U.S., as 
well as. abroad? What limitations should be placed 
on our military when it comes to identifying and 
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acting on targets in cyberspace? Will we as a nation 
have to redefine the role of the military in the 
coming digital years? 


As fascinating as I find these issues, Dominguez 
and Wray are more interested in retrofitting 
political activism for the millennium. Both of them 
come from activist backgrounds. Dominguez got 
his start working with nuclear fallout victims in 
southern Utah, then with Act Up (the AIDS activist 
group) in the '80s. Wray was a rabid. anti-Gulf War 
protestor. Together they formed the genesis of The 
Electronic Disturbance Theater. 


"Electronic civil disobedience began with Act Up, 
with phone trees and jamming opponents’ fax 
machines," Dominguez says. "But after awhile we 
found that spectacular actions weren't getting the 
response from the media. that they did. before.” 


The Electronic Disturbance Theater's next event 
will be held on Dec. 22. The group's season-ending 
finale is scheduled for Jan. 1, 1999, when users will 
be encouraged to actually download a copy of the 
FloodNet software (complete with instructions) 
and distribute it to the masses. Part of the art 
project, it seems, is finding out what the activist 
community will end up doing with FloodNet. 


Whether you agree or disagree with the group's 
politics is irrelevant. What is important is to 
acknowledge that The Electronic Disturbance 
Theater has come up with a cutting-edge way to 
use the Internet for mass political protest. 


Look for the group's methods to spread to other 
factions, on the left and the right, as the Internet 
continues to transform the political landscape. 


What do you think about this issue? You: can. 
contact me through the Forum, which canbe 
accessed from this. page. 


External ink; 
The Etectronic Disturbance Fheater 
¢http:/Awww.thing net/~rdom/ecd/archives. html): 
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Whois Query Results 


Registrant: 
aurora. blye AURORABLUE-DOM 
15710 innetonka Boulevard 


Administrative Contact, Technical Contact, Zone Contact: 
Golightly, Sky SG687 sky@GOLIGHTLY.ORG 
(408)\812-0613 

Billing Contact: 

Golightly, Sky SG687 sky@GOLIGHTLY.ORG 
(408) 812%0613 


Record last updated on 14-Aug-98. 
Record created on 06-Feb-98. 
Database last updated on 15-Dec-98 03:16:33 EST. 


Domain servers in listed order: 


ZONE .AREA.COM 165.90.20.20 
NS .AREA.COM 165.90.22.22 
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Whois Query Results 


Register 5 Domal Nanie_ | 
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Domain Name: GOLIGHTLY.ORG 


Admin®strative Contact, Technical Contact, Zone Contact: 
Golightly, Sky S8G687 sky@GOLIGHTLY.ORG 
(408) 812-0613 
Billing Contact: 
Golightly, Sky SG687 sky@GOLIGHTLY .ORG 
(408) 812-0613 


Record last updated on 25-Sep-98. 
Record created on 09-Dec-96. 
Database last updated on 15-Dec-98 03:16:33 EST. 


Domain servers in listed order: 


ZONE .AREA.COM 165.90.20.20 
NS .AREA.COM 165.90.22.22 
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[Homo ] [Contact Us") Registration Services 
eerste RESOURCES HOWTO... FORMS FAQ SITEMAP SEARCH 
NETWORK V4 Search for a Danan Wante | | Req tera Domain Wane ma) 
SOLUTIONS” 
Whois Query Results 
Registrant: 


Golightly GOLIGHTLY2-DOM 
7055 Oak Ridge Rd. 
Aptos, CA 95003 


Domain Name: GOLIGHTLY.ORG 


Administrative Contact, Technical Contact, Zone Contact: 
Golightly, Sky SG687 sky@GOLIGHTLY.ORG 
(408) 812-0613 
Billing Contact: 
Golightly, Sky SG687 sky@GOLIGHTLY.ORG 
(408) 812-0613 


Record last updated on 25-Sep-98. 
Record created on 09-Dec-96. 
Database last updated on 15-Dec-98 03:16:33 EST. 


Domain servers in listed order: 


ZONE .AREA.COM 165.90.20.20 
NS .AREA.COM 165.90.22.22 
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Date: - 12/19/98 11:41:23 
From: 
Subject: FWD: {g2i) ECD: Floodnet targets mexican stockexchange - decembe 
To: See Below 
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Date: 12/18/98 5:19 PM 


Subject: THE ZAPATISTA FLOODNET TARGETS THE MEXICAN STOCKEXCHANGE - December 22, 1998 


THE ZAPATISTA FLOODNET TARGETS THE MEXICAN STOCKEXCHANGE IN MEMORY OF THE ACTEAL DEAD 


DECEMBER 22, 1998 (‘S) 


FROM 10:00 AM TO 4:00 PM (MEXICO CITY TIME) 

FROM 4:00 PM TO 10:00 PM (GMT- GREENWICH MEAN TIME) din 
<http://www.thing.net/~rdom 

Dear sisters and brothers, 


This time the Winds blow South. This Zapatista FloodNet sit-in is directed against the Mexican 
Stock Exchange, which has played a key role in enforcing the continued "low-intensity conflict" 
in the State of Chiapas. 
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Under the direction of the Mexican Government and with the support of the United States, the 
weapons and training for The Drug Wars are being used in Chiapas. Counterinsurgency orders were 
established by the Department of National Defense's *Chiapas Campaign Plan 1994* which makes 
explicit that the key objective is: "The breaking of the support relationship which exists 
between the population and the transgressors of the law." They have been building the intensity 
level ever since by using groups which make up the Mixed Operations Bases (BOM), which include 
paramilitary units, the Federal Army, the State Public Security agencies, the State and Federal 
Judicial Police, in addition to the immigration police, specifically in those areas where there 
are Zapatista Army of National Liberation (EZLN) sympathizers living. 


On December 22, 1997, in Acteal 45 people were killed brutally by paramilitary groups, a 
community under the protection of the militarization. The Mexican government propaganda framed 
the massacre as the outcome of "intra and inter-community conflicts." The PRI party instead of 
pursuing the guilty and holding them responsible, it exploited it in order to reinforce the 
military presence in the entire state. 


The killing was a State crime. The attack was planned and executed according to military 
counterinsurgency manuals. The purpose for the genocide was to combat the rebellious communities. 
There is evidence and testimonies in judicial records that point to official responsibility. The 
freedom enjoyed by the assassins in order to carry ont their crime was incredible. More than 60 
people-~90 according to the Fray Bartolome Center--armed with AK-47 guns, 22 rifles and UZI 
machine guns fired their guns for seven hours against these people who had been praying at a 
hermitage, 


The outcome: 45 dead, 22 wounded... and a people hurt forever. There are proofs that "40 members 
of the police were 200 meters away From the place where the crime took place and didn't do 
anything while the indigenous people were being massacred”. 


Alonso Vazquez Gsmez Lorenzo Gsmez Pirez, Marma Luna Mindez, Versnica Pirez Oyalti, Rosa Vazquez 
Luna, Sebastian Gsmez Pirez, Versnica Vazquez Luna, Daniel Gsmez Pirez, Micaela Vazquez Luna, 
Pablina Hernandez Vazquez, Juana Vazquez Luna, Roselia Gsmez Hernandez, Juana Luna Vazquez, 
Graciela Gsmez Hernandez, Marma Jiminez Luna, Guadalupe Gsmez Hernandez, Susana Jiminez Luna, 
Marma Ruiz Oyalti, Miguel Jiminez Pirez, Catalina Vazquez Pirez, Marcela Luna Ruiz Catalina Luna 
Ruiz, Alejandro Luna Ruiz, Manuela Paciencia Moreno, Jaime Luna Ruiz, Margarito Gsmez Paciencia, 
Regina Luna Pirez; Rosa Gsmez Pirez Roselia Luna Pirez Doida Ruiz Gsmez Ignacio Pukuj Luna, 


e 
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ZAPATISTAS DENY BEING RESPONSIBLE FOR AMBUSH IN LOS PLATANOS. 
La Jornada. 


In a communique signed by Comandantes David, Moises and Daniel, the BZLN denied any 
responsibility for the ambush of a group of PRI indigenous yesterday in the community of Los 
Platanos, municipality of El Bosque, and they said that, just a few days prior to the first 
anniversary of the Acteal massacre, the government is trying to distract public opinion and put 
the victims in the dock. Condemning the attack, in which one child was killed and’ 7 persons were 
wounded, the zapatistas held the federal government responsible and called on civil society to 
not be deceived, since the EZLN does not attack civilians, and the government does. They 
explained the ambush was due to an internal struggle between groups who are fighting for control 
of Los Platanos and for the money and equipment which the government is giving to paramilitary 
groups. The zapatista leadership added that, for a year now, Los Platanos has been under the 
control of paramilitary groups, Public Security police and federal soldiers, w 

ho permit or deny access to people there. The EZLN said that there is also evidence that Public 
Security collaborated in the attack, since, an hour after the ambush, 11 police officers arrived 
in a community near Los Platanos, asking for help in escaping. Some 370 PRI families live in Los 
Platanos, who expelled 34 zapatista families in late April, who were in refuge in nearby locales. 
So far this year, five PRI indigenous persons have died, and more than 24 have been wounded as a 
consequence of eight armed attacks. 


This information was provided as a service of Zapatistas Online. 


The Electronic Disturbance Theater Invites the World Wide Community To Celebrate The Fifth 
Anniversary of The Zapatista Manifestation on January 1, 1999. 


At one minute after midnight, we will release the Public Version of the Zapatista FloodNet. Which 
individuals and groups will be able to download and use for Virtual Sit-Inms the day after and In 
the days to come. 


The URL to the Public Version of the Zaptatista FloodNet will be found at one minute after 
midnight at: 


<http://www.fakeshop.com> 

Please join us. The Electronic Disturbance Theater 
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THE ZAPATISTA FLOODNET TARGETS THE MEXICAN STOCKEXCHANGE IN MEMORY OF THE ACTEAL DEAD 
DECEMBER 22, 1998 

FROM 10:00 AM TO 4:00 PM (MEXICO CITY TIME) 

FROM 4:00 PM TO 10:00 PM (GMT- GREENWICH MEAN TIME) 


<http://www.thing.net/~rdom> 


RFC822 header 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/18/98 


On December 18, 1998, sat printed out the web 
pages located at the Uniform Resource Locator (URL) of 


http: //www.wellengaged.com/engaged/wrap.cgi/formes.cgi?c=forbeséf ise 
O&t=2, titled [ Form. The forum was linked_to b7c 
the Forbes newsarticle titled “When art meets cyberwar” by[|.___ | 

This article found at the URL of 


http://www. forbes.com/penenberg/index.htm. @) 
dawn, 
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Eric Kluitenberg 


InfoWar Reflection #1 


This should be the first of a small series of informal notes from the Ars 

Electronica Festival 1998, which devotes itself to the theme InfoWar (you 

all know that). And there is a regular infowar going on, it seems, in the 

lobby of the Bruecknerhaus, where experimental soundscapes continuously 
bombard our senses, deregulating and disinforming them, dissociating understanding 
from perception, competing for wetware input channels, in the face of adverse 
machinic output channels that crowd the environment in abundance. 


Yesterday there was a relative calm (before the storm? - no desert this 

time though!). We were enjoying the calm view on the River Danube, flowing 

softly along the banks of the city Linz. The paysan scene was hardly reminiscent 

of the electronic disorder that was impeding upon us, within a matter of 

a few hours. Yesterday we muttered words in the net, and the air even, 

as we watched the sun set over the river and some distant hills, while ' 
we interviewed some of the distinguished guests of the festival and the 

InfoWar symposium. 


Meanwhile, today (Tuesday) the symposium has started off, in a tightly 
structured academic proceeding, completely remote from the info-pandemonium 
that awaits the ‘innocent’ visitor outside of the quiet lecture hall. 


The talks opened a predictable path of discourse. The grand war machines 

of the post-industrial era as the production sites for the contemporary 

formats of the InfoWar products. Much implied secrecy, non-disclosures 

and semi-disclosures, partly by the people we are lead to believe operate 

in the very belly of the beast on a daily basis. This is the institutionalised 
version of InfoWar, the official intelligence complots and exploits, a 

world of wonder and danger, maybe adventure..? But always a war machine, 
waging its effort against a perceived enemy, clear or abstract. The strategic 
arena of information and dis-information tactics, of perceptual de-stabilisation, 
of informatic security and transgression. 


This institutionalised version of InfoWar is countered by it’s logical 
and necessary counter-part, the InfoTerror, individualist and small-scale : 
autonomous action against the corporate, state and global players. The 

destructive gestures of the aggressive mega-hacker. No longer a game, but 

a serious attempt to destabilise whatever order apparently needs to become 

the object of the attack. 


Yesterday I talked with Stefan Wray of the Electronic Disturbance Theater 
about his concept of bottom-up information warfare and more importantly 
electronic civic disobedience. Wray’s approach to info-action (perhaps 
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more than *war*) in effect seems to point towards a third way, out of the 
dichotomy of InfoWar and InfoTerror. With their real blockades of targeted 
web sites via "virtual sit-ins", the floodnet system, enabling any visitor 

to trigger an auto-reload sequence which when operated with the right critical 
mass of active floodnet visitors blocks the site, they propose a model 

for collective civil info-action. It emphasises the social dimension of 

the Net, where only through collective action a real effect is achieved, 

and can be achieved by engaging the critical mass of individuals into a 
collective civil disobedience action. 


Collective info-action is a new tool to dismantle the neo-liberal mythologies 
of the cyber-sphere, and re-locate the net discourse in the very heart 

of society and all its inherent social, political and cultural debates, 
contradictions, and shared and contested beliefs, where it belongs. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/18/98 


On December 18, 1998, SA [__|printea out the new 
web pages located at the Uniform Resource Locator of 
http://www.thing.net/~rdom/ecd/ecd.html, titled ELECTRONIC CIVIL 
DISOBEDIENCE. There was an announcement for EDT FloodNet action 
on the White House web site from 10:00 a.m. to 4:00 p.m. 


On December 18, 1998, at approximately 10:00am and at 
various other times until 5:00pm, 
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7 a New York 
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Case ID #: 288-NY-268557 


Title: ELECTRONIC DISTURBANCE THEATER; 


CITA; 
00: NY 


Details: Subject Electronic Disturbance Theater (EDT) is a group 
claiming on its Internet web site to protest various national and 
international policies through orchestrated attacks on computer 
systems. The attacks employ a program called “FloodNet” which 
causes a denial of service to the target computer. To date, the 
EDT has orchestrated attacks on Federal Government computer 
systems as well as foreign government computer systems. 


b6 
SAL jis in the process of [72 from Ft. b7C 
Benning for all Internet traffic on 11/22/1998 during the EDT’s b7E 


FloodNet attack of their web site for the School of the Americas. 
DefenseLink, a Pentagon site, has alsol_———“‘“‘SCOCOC*dé ECM 
the 10/09/1998 FloodNet attack. On 12/18/1998, the White House 


nuing to target 
oreign governmental systems, as a result, 
more victims will be identified 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/28/98 


The following investigation was conducted in connection b6 
with the nic Disturbance Theater (EDT). On December 10, b7c 
used an E-mail account b7E 


From December 10, 1998 through December 28, 1998, SA ahi 
received twenty five E~mails from[__—“‘(’C—CS@zYS 


These messages have been 
printed out and attached in a 1A envelope. 
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MATIL-IT REQUESTED: DECEMBER 22, 1998 1L03T3F 
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FILE: MNOWN 
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